Re: CGI configuration troubles

Httpd running as root is a major security problem.  If someone manages to
take control of your httpd server and force a script to it, it will run in
the security context of root.  Major problem. The bad guys will 'own' your
server.

What operating system is the server running?  It makes a difference in what
the default location is for your files and how to use the file system
utilities to find files.

Did you install Apache from source or just using what the OS came with?
Have you patched your server's OS yet?

Lyle

----- Original Message ----- 
From: <bxk(at)bxk.cjb.net>
To: <hwg-servers(at)hwg.org>
Sent: Saturday, November 29, 2003 10:23 PM
Subject: CGI configuration troubles


> New
> Getting "Forbidden" Do Not Have Permission to Access
> when trying to access scripts. . .
>
> Need to configure cgi scripts for permissions and to tell where cgi
scripts are stored
> but have major obstacles:
>
> A few details, please forgive my ignorance:
> 1.  httpd is running as "root" and "httpd" (?) is this right?
> 2.  cant locate httpd.conf, can only find httpd_conf.pm on server
> 3.  cant locate error log (duh!) how to find from terminal?
>
> SERVER_SOFTWARE = Apache/1.3.26 (Darwin)
>

HWG: hwg-servers mailing list archives, maintained by Webmasters @ IWA